The plugin's feature request form saves uploaded attachments into the WordPress uploads directory without checking the file type, so a logged-in user with Editor access or higher can upload a PHP file and run code on the server. Widgets for Google Reviews 11.0.2 and older are affected. This vulnerability affects the following application versions:... Weiterlesen: Unrestricted File Upload in Widgets for Google Reviews Feature Request
Intelligence View
⚡ tsecurity.de Intelligence
Unrestricted File Upload in Widgets for Google Reviews Feature Request
The plugin's feature request form saves uploaded attachments into the WordPress uploads directory without checking the file type, so a logged-in user with…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
34 Quellen
CVE-2025-40160 | Linux Kernel up to 6.6.112/6.12.53/6.17.3 find_virq privilege escalation (Nessus ID 277808 / WID-SEC-2025-2579)
33 weitere Quellen
BBleepingComputervor 1 Std.Critical Linux kernel flaw allows remote root attacks on MPTCP servers LLinux Magazine News (path…vor 2 Std.Working Exploit for a Linux Kernel Flaw Made Public VVulDB Updatesvor 5 Std.CVE-2024-56611 | Linux Kernel up to 6.6.65/6.12.4 mempolicy migrate_to_node null pointer dereference (Nessus ID 214901 / WID-SEC-2024-3762) VVulDB Updatesvor 5 Std.CVE-2025-21658 | Linux Kernel up to 6.6.71/6.12.9 btrfs null pointer dereference (Nessus ID 233479 / WID-SEC-2025-0155) VVulDB Updatesvor 5 Std.CVE-2024-57888 | Linux Kernel up to 6.12.8 cancel_delayed_work_sync privilege escalation (Nessus ID 214781 / WID-SEC-2025-0105) VVulDB Updatesvor 5 Std.CVE-2024-49569 | Linux Kernel up to 6.12.4 blk_mq_freeze_queue_wait denial of service (Nessus ID 233479 / WID-SEC-2025-0047)
+27
11 Quellen
Binance-Hack mit 6,3 Mrd. US-Dollar: TRM sieht Zusammenhang mit TraderTraitor
10 weitere Quellen
GGoogle Alertvor 50 Min.Cyberangriff auf Binance: 6,3 Mrd. Dollar betroffen, Auszahlungen gestoppt IIT Security Newsvor 53 Min.The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline NNYT > Cybersecurityvor 4 Std.Binance’s $6.3 Billion Hack Is Just the Start of a Risky New Era EeSecurityPlanetvor 4 Std.Binance Reports $6.3 Billion Crypto Hack as Partners Race to Freeze Funds GGBHackers Securityvor 5 Std.North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever RSS«Hacker News» 🗞️🦾 IT BOLTWI…vor 4 Std.Binance-Hack: Börse versichert Kundengelder sicher, 5 Mrd. Rückstellung
+4
7 Quellen
This Dell UltraSharp 6K Monitor Is Half Off Before Black Friday Even Hits
6 weitere Quellen
ZZDNETvor 2 Std.The 5 best early Black Friday iPad deals live now ZZDNETvor 2 Std.Walmart is hosting an early Black Friday sale, and some deals are already live LLatest from TechRadarvor 4 Std.The Google Pixel 11 series just hit a record-low price ahead of Black Friday — and I'd be surprised if it gets cheaper LLatest from TechRadarvor 4 Std.The Boulies EP200 is our best-value office chair pick — now the 'the archetypal office chair for most people' drops in price in an early Black Friday sale CCNETvor 4 Std.Upgrade Your Audio Output With This Better-Than-Black Friday Deal on the JBL Mic CCNETvor 3 Std.This Retro Heater Brings Style and Warmth to Any Room and It’s $47 Off Ahead of Black Friday
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4281811/sicherheitsluecken-cve/unrestricted-file-upload-in-widgets-for-google-reviews-feature-request/